It looks like @tailscale will be implementing funnel + authentication.

bsky.app/profile/apenwarr.ca/p

I'm thrilled about this. It will be fantastic for Dropserver and any other thing where you want to give access to friends without inviting the entire universe to poke at your server.

Basically Tailscale will make all visitors authenticate via an identity provider before forwarding requests to your little server. Your app just has to authorize based on whether you recognize that email or not.

0

If you have a fediverse account, you can quote this note from your own instance. Search https://social.tchncs.de/users/teleclimber/statuses/114705497090300181 on your instance and quote it. (Note that quoting is not supported in Mastodon.)